CVE-2003-1307

This PoC demonstrates a local file descriptor manipulation vulnerability in Apache's mod_php, allowing an attacker to overwrite the access_log by repositioning and writing arbitrary content to file descriptor 7. The exploit leverages fcntl and lseek to modify the file descriptor's behavior.

This exploit leverages a local privilege escalation vulnerability in Apache mod_php (CVE-2003-1307) by hijacking a privileged file descriptor (fd 4) to impersonate the legitimate server. It forks to avoid termination by Apache, initializes an SSL server, and serves malicious content to clients.